I have a script below that enables me to remove .ttf and .otf fonts from the users directory. It runs fine but when I look at the logs in the jss it doesnt tell me what it removed only that it completed. How can I put something in this script that tells me which fonts it removed? #!/bin/sh find /Users/ -type f -name "*.ttf" -exec rm -f {} ; find /Users/ -type f -name "*.otf" -exec rm -f {} ; exit 0

We have found inconsistent "The imaging process is finishing installing software" display curtain at imaging on our testing MackBook Pro. Instead we get the Apple ID window and it stays up until the imaging process finishes. Mainly this happens if the computer is not in the inventory. JSS: 8.62

Hi everyone, I have just started imaging my school's fleet of 440 MacBook Airs through Netboot imaging and the imaging speed is maxing out at 15MB/s. When I open Activity Monitor I see that the process 'fontd' is writing between 30-40GB of data to the drive of each device during the block copy of our DMG. Our DMG is 37GB and the machines are writing at leat 70GB in total prior to the reboot at the end of the Casper Imaging workflow. If I manually kill the fontd and fontworker processes the imaging speed immediately jumps back to normal (i.e. at least 80MB/s). Our Netboot image is made with AutoCasperNBI with no customisations whatsoever so I really don't understand what could be causing fontd to be going crazy or initiating at all. Please help!

Hi folks, I have a dilemma that I would love some help resolving...- I have three NetBoot images, one based on OSX10.10.4 with Casper Imaging 9.73, one based on OSX10.11.6 with Casper Imaging 9.93 and the other with OSX10.12.2 with Casper Imaging 9.97- When I am imaging a single machine the transfer speeds that I get are 98MB/s average for the OSX10.10.4 NetBoot, 35MB/s average with the OSX10.11.6 NetBoot and 33MB/s average with the OSX10.12.2. In early January I am going to be imaging 500 MacBook Air's. I have three days to do it in. Should I continue to use the OSX10.10.4 NetBoot or is there something that I can do to sort out the speed issues with the other two NetBoot images? Thanks in advance!

Maybe some others out there who use AutoPKGr can help me out. Currently have a recipe to update Adobe Reader DC. When I run my overRide recipe I'm getting this error sent to my email: Parent recipe com.github.jss-recipes.jss.AdobeReaderDC contents differ from expected. Path: /Users/myuser/Library/AutoPkg/RecipeRepos/com.github.autopkg.jss-recipes/Adobe Acrobat Reader DC/Adobe Acrobat Reader DC.jss.recipe Any information would help since I don't understand what the problem is or what that error means?

Hello, for our password policy we are using a script we have found here on Jamfnation. This runs perfectly on MacBooks (Mid 2015) but with the new MacBooks 2016 and Touch ID not. After a several of logins (4 or 5 times) i can’t login anymore. I got a hint that the password is wrong (shaking password field) and then i got a black screen and i can only see the cursor. Only with a hard shutdown i can fix the problem. If Touch ID disabled, then i haven’t the problems. Does somebody has any idea? #!/bin/sh ########################################################################################################## ## Pupose: Create a pwpolicy XML file based upon variables and options included below. ## Policy is applied and then file gets deleted. Use "sudo pwpolicy -u <user> -getaccountpolicies" ## to see it, and "sudo pwpolicy -u <user> -clearaccountpolicies" to clear it. ## ## Usage: Edit variables in Variable flowerbox below. ##

Hello JN, I am struggling to find a way to update iLife Suite apps. I found this: https://acdesigntech.wordpress.com/2013/03/06/disable-mac-app-store-receipts-to-reenable-downloaded-update-packages/ I tested the method mentioned and it does indeed take the apps out of the scope of Software Update in the App Store and eliminate having to touch each machine with an AppleID and password (cool!). Now, I just cannot seem to find any way to update from the command line similar to this one: sudo softwareupdate -iav which I run in a script after image. What are all of you doing to keep these up to date automatically-either at image time or continuously? I would rather not have to package with composer overtime there is an update from Apple? I am aware of VPP and have that in process. Outside of that, what other options are there? TIA, /randy

If one of my Middle School students deletes (i.e. removes the icon from the spring board) a system app, like iBooks, they cannot re-install via Self-Service, and error "Application is a system app" shows in the management commands inside the JAMF Pro server. The only way to get it back, that I know of, is to use the App Store, which is locked for these students. Anyone know a work around?

Hi all, Back in the El Capitan days, I could download a "Install OS X El Capitan 10.11.6 installESD.dmg" file, upload it to Casper, and end-users can select it within Self Service to upgrade their operating system on their Macbooks. I am trying to find a "Install macOS Sierra 10.12.2 installESD.dmg", but I can't find it anywhere. I remember it used to be in https://developer.apple.com/download Does anyone know where the Sierra dmg would be? Or know how I can create one? The one I download from App Store would only be an app file. I don't know if this would work.

After switching from Profile Manager to Casper, I continued deploying printers using a configuration profile and scoped to computer groups. I have the full HP printer package installed on all the computers and I define the printers manually in Printers under Computer Management in JSS. The printers are all shared on a windows print server. The problem I am having is that the printers will show up and print fine using any application, but the printers do not show up in system preferences. Since we install some printers locally, it would be useful for locally installed and managed printers to show up in that list. Has anyone else run into this problem?

Hey there, all! I have an extension attribute that I've been using for a few years. With the addition of macOS Sierra, this lookup, specifically "system_profiler" and "SPSerialATADataType" no longer works for MacBookPro13,1 (2TBT3 models) in my organization. Is anyone else noticing this issue? No results are posted via the JSS or locally when performed in Terminal. It appears that Apple has deprecated "system_profiler" and I am wondering if there is a replacement lookup that others are using. #!/bin/bash Medium=$(system_profiler SPSerialATADataType | grep Medium Type | sed -e 's/^[Medium Type: ]*//') echo "<result>$Medium</result>"

So, my org uses Intego Flextivity as our antivirus product. It installs, then speaks to a central console for activation and monitoring. Also, when installed manually, the machine requires an immediate restart to complete installation. We can install the program fine via policy and have it speak to the web console, but if the package is installed via Imaging it appears to install fine but never speaks to the console (and thereby never gets activated or starts actually protecting the computer). Does anybody else use this software who might be able to fix this issue?

sudo: no tty present and no askpass program specified If so why and how did you fix it? I had them rebuild the Linux server and ran the netboot sus appliance but still no go. I can log into the web server but if I try to make a change a save such as the network time server, it does not save and it gives me the sudo: no tty present and no askpass program specified error.

Hi jamf friends :) - welcome in the year 2017 We are having the problem that Outlook's standard setting for First day of the week is Sunday.We would need to change this setting to Monday, but I can't find a Applescript option for this and even a snapshot with the composer does not help (I thought it should be stored in the com.microsoft.outlook.plist but it isn't or at least I can't find it).In the windows registry this option is called FirstDOW. Does anyone already solved that problem? Thank you all.BRDaniel

Following the @rich.trouton article on using AppStoreExtract to download apps from the App Store, I bake the apps into my master image with AutoDMG prior to deployment. The reimaged machines then have the apps, which open and run normally. The problem is the App Store does not recognze them, and prompts to update to the same versions that are already installed. I have tried with and without a _MASReceipt.

Hi all, When authenticating with cached credentials on a AD bound Mac (10.10.x, 10.11.x, 10.12.x) the group memberships are not cached it seems...I was expecting that AD group memberships should also be cached. Seems not the case. Anyone else seeing this behaviour? The case:I use several groups in the form of laptop_admins which all live in AD. The users in those groups should receive admin privileges when logging in to the system. (configured in bind script using dsconfigad -groups) It all works fine except when disconnected from the network during login. Everyone has 2 users, usern and admin_usern. only admin_usern users can be member of a laptop_admins group, usern are standard accounts. When authenticating with network connected, the terminal command id admin_usern gives the expected results (... ,331206878(XXXXXlaptop_admins), ...) . When authenticating with network disconnected, id admin_usern doesn't give that group, but refreshes/updates once communication wit

Stop me if you've already posted this, but I couldn't find anyone talking about it already, which may have just been how I was trying to search. As always, standing on the shoulders of giants, in this case, Per Olofsson's CreateUserPkg. Been using it to deploy one of our hidden service accounts during build with AutoDMG. With ≤10.11 it's always worked to hide our service account if the User ID is sub-500. Starting with testing out an image for 10.12, the User is not hidden. It does create the home directory where we want it (in this case /var/hiddenuser), but it's presented at the login screen, even after rebooting, and it's listed as a user under System Preferences > Users & Groups. Is anyone else encountering this? I could go back and script out JAMF creating/hiding the user, but the CreateUserPkg was a clean, easy way to do it during an image build. I can probably, easily I would guess, push something along the lines of sudo dscl . create /var/hiddenuser IsHidde

I read somewhere that Apple automatically cached Sierra in 10.11.6. If that is the case, is there an easier way to install this OS now? This is for a lab so ideally needs to be done so I don't have to touch the machine. Thanks.

Having a hard time creating this smart group. I would like to create a group of computers that already has Office 2011 installed (14.x.x) and does not have any version of Office 2016 installed (15.x.x). Does anyone know a good way to do this? I tried creating the following: App Title has "Microsoft Word.app"App Version is like "14."App Version is not like "15." However that gives me a group of machines including my own, which has Word 15.31.x installed. Any ideas?

I think I'm losing my mind (the hair's already gone, so it makes sense that it'd be next...) We've been using Casper for three years to manage our first pool of 1:1 laptops. It's almost time to replace these laptops with new ones, which is happening this Summer (whee!). I've built a new JSS 8.7 to manage these new laptops and have been testing and configuring, trying to match the settings as closely as possible to the original JSS (v8.6.2). I have a memory of configuring the original JSS to enforce computer my computer naming. I can remember there being a setting somewhere in the JSS to allow this. So if a computer is re-assigned to someone, you'd only have to change the name in the computer record in the JSS and during the computer's next daily recon, JSS would rename that computer with the new name. But I can't for the life of me find this setting in the new JSS (or the old JSS). I remember ticking off a box somewhere to enforce compute

Does anyone know if there is a way to disable Self-Service prompts (i.e. Allow to use location, etc.) because even though we're using VPP device based app assignments some users are still being asked to register their SS with the App Store.

Bonjour, Je suis tout récemment passé sur mon MacBook Pro d'OSX Yosemite (10.10) à macOS Sierra (10.12). J'utilise donc toujours Casper Admin pour déposer mes packages. À l'ouverture de Casper Admin, l'authentification fonctionne, mais impossible de monter le répertoire partagé. Quand j'étais en 10.10.5, cela fonctionnait sans problème. Ce répertoire partagé est herbégé sur un MacMini en SMB.J'arrive à monter ce répertoire depuis mon MacBook Pro via le même protocole (SMB) et ce via, les deux comptes (Read/Write et Read-Only). Ci-dessous les différentes versions :- Casper Admin : 9.81- JSS : 9.81- OS X du SMB : 10.10.5- Mon MacBook Pro : 10.12.2 Existe-t-il un problème de compatibilité quelconque entre ma machine (en 10.12), le JSS et le dossier partagé ? Quelqu'un aurait-il déjà rencontré un problème similaire ? N'hésitez pas si questions/remarques. Merci par avance,Bien à vous, -- Yohann D.

When scoping to an IP Segment, which IP is used: IP Address or Reported IP Address?

Hello everyone, Is it possible to create a grouptemplate.xml which acts on the jamf criterion patch reporting to create smart group based on this criteria ? Many thanks in advanceBen

Hi everyone, Just got our first DEP unit, however I don't see any device under DEP as per screen shot. Anyone know the workaround?